SUSE CVE-2007-2500

server/parser/spritedefinition.cpp in GNU Gnash aka GNU Flash Player 0.7.2 allows remote attackers to execute arbitrary code via a large number of SHOWFRAME elements within a DEFINESPRITE element, which triggers memory corruption and enables the attacker to call free with an arbitrary address,...

GNU Gnash Flash Player array overflow

Array overflow on large number of SHOWFRAME elements within DEFINESPRITE...

CVE-2007-2500

CVE-2007-2500 affects GNU Gnash 0.7.2 where a large number of SHOWFRAME elements inside a DEFINESPRITE in server/parser/sprite_definition.cpp triggers memory corruption and allows code execution by calling free with an arbitrary address. Public reports (NVD, SUSE, openSUSE NASL) describe memory c...